18 September 2025

Cookie Policy

Vaxy is an app and trade name of Vaccinatieboekje B.V.

This cookie policy explains how Vaccinatieboekje B.V. ("Vaxy", "we", "us") uses cookies and similar technologies (such as pixels, SDKs and local storage) on our website(s) and web application(s) (together: the "Website"). For the processing of personal data, please see our Privacy and cookie statement.


1. What are cookies?

Cookies are small text files placed on your device when you visit the Website. By "cookies" we also mean comparable techniques such as tracking pixels, tags, SDKs and local storage. Some cookies are necessary for the Website to work; others help us measure performance, improve functionality or show more relevant advertisements.


2. Consent & your choices

On your first visit we show a cookie banner with an explanation. There you can consent to non-essential cookies (for example statistics/advertising) or set your preferences. You can change or withdraw your choice at any time via:

Manage cookie preferences

We always place strictly necessary cookies (no consent required). For statistics (anonymous/aggregate) we prefer privacy-friendly settings; for all forms of (re)targeting or cross-site tracking we ask for prior consent.


3. Which categories do we use?

3.1. Strictly necessary cookies (always on)

Required for basic functions such as page navigation, security (for example CSRF), load balancing and remembering your cookie choice. Without these cookies the Website does not work properly. The vaxy_locale cookie remembers your language preference and does not require consent.

3.2. Preferences / Functional (optional)

Remembering settings (for example language, region) and enhanced functions such as login or showing embedded content.

3.3. Statistics / Analytics (optional)

Helps us understand how the Website is used (visited pages, session duration, error messages) so we can improve it. Where possible, we use privacy-friendly, anonymized measurements. We ask for consent for identifiable tracking.

3.4. Marketing / Advertising (optional)

Used for (re)targeting, building audiences and measuring advertising campaigns on platforms such as Facebook/Instagram and LinkedIn. Only with your explicit consent.


4. Overview of example cookies & pixels

The specific cookies may change per update or campaign. Below is an example overview of commonly used cookies and pixel technologies we may use. The current status and granularity can be found in the cookie banner / preference manager.

| Service | Purpose / Category | Type / Example name | Retention period | Provider / Domain | | --- | --- | --- | --- | --- | | First-party (Vaxy) | Necessary (cookie choice, session, CSRF) | cookie_consent, session_id, csrftoken | Session up to 12 months | vaxy.app / *.vaxy.app, .vaccinatieboekje.com | | Analytics (Google Analytics 4) | Statistics | _ga, ga, _gid (privacy-friendly settings) | 24 hours up to 26 months | vaxy.app / google.com | | Meta Pixel (Facebook/Instagram) | Marketing / (Re)targeting | _fbp + pixel events | 90 days (typical) | vaxy.app / facebook.com |

Please note: older Universal Analytics cookies (such as __utma, __utmz) may still occur in historical implementations, but we are migrating to GA4. Always consult the cookie banner for the current list.


5. Google Analytics (privacy-friendly)

We use Google Analytics (preferably GA4) to collect aggregated statistics. We have activated privacy-friendly settings (such as IP masking) and concluded a processing agreement with Google. Data is not shared with other Google services for Google's own purposes. Where possible, we limit retention periods (for example <= 26 months).


6. Advertising (Meta/LinkedIn) - only after consent

With your consent we may use advertising cookies and pixels from Meta (Facebook/Instagram), LinkedIn and others to build audiences, optimize campaigns and measure results (retargeting). You can withdraw your consent at any time via Manage cookie preferences. Without consent, we do not place these cookies.


7. International transfers

Some providers (such as Google, Meta and LinkedIn) may process data outside the European Economic Area. Where relevant, we take appropriate safeguards (for example standard contractual clauses) and limit data flows to what is necessary. See also their privacy statements for details.


8. Enabling and disabling cookies (browser)

You can also manage cookies through your browser settings. Please note that disabling all cookies may limit the functionality of parts of the Website. Consult your browser's help section for instructions.


9. Retention periods & deletion

Most cookies expire automatically after a certain period ("expiry time"). You can also manually delete cookies through your browser. For statistics and logs we use retention periods that are as short as possible and appropriate for the purpose (see the Privacy Statement).


10. Third-party websites

This cookie policy does not apply to third-party websites or services to which we link. We recommend reading the privacy and cookie statements of those parties.


11. Changes

We may amend this cookie policy from time to time, for example due to changes to our Website or cookie technology. Please regularly check the "Last updated" date above.


12. Contact

Vaccinatieboekje B.V.
Established in Amsterdam
Email: [email protected]